Security Market Segment LS
Monday, 18 November 2019 10:58

Ransomware: ACSC urges those affected not to pay ransom

Ransomware: ACSC urges those affected not to pay ransom Pixabay

The Australian Cyber Security Centre has reiterated its advice to Australians regarding ransomware infections, saying that it strongly advised people not to pay any ransom.

The ACSC was responding to queries from iTWire about a Sydney-based company, Fast Data Recovery, that is offering to decrypt files which have been encrypted by the Dharma ransomware, something which nobody else has been able to do given the strength of encryption used.

"There's no guarantee paying will restore files, and paying a ransom could make victims vulnerable to further attacks," an ACSC spokesperson said in a statement.

"We advise Australian individuals and businesses affected by ransomware to log a cyber crime report via ReportCyber."

Ransomware, which mostly affects computers running Windows, has become something of a scourge among businesses, with frequent attacks targeting them and rendering them unable to operate for lengthy periods.

The case of Fast Data Recovery was brought to the attention of iTWire by Brett Callow, a researcher with security company Emsisoft.

Callow sent the company a file encrypted by Dharma and made it clear that he did not wish to pay the ransom. "The company claimed it would be able to 'reverse engineer the ransomware decryption key' for a fee of US$6879/A$9650," he said.

"Unless you have access to a quantum computer more advanced than any machine known to have been built, it’s simply not possible to 'reverse engineer the ransomware decryption key'.

"Dharma uses perfectly implemented RSA-1024 and the key needed to decrypt a victim’s files can only be created by the criminal or someone with access to the criminal’s private key."


26-27 February 2020 | Hilton Brisbane

Connecting the region’s leading data analytics professionals to drive and inspire your future strategy

Leading the data analytics division has never been easy, but now the challenge is on to remain ahead of the competition and reap the massive rewards as a strategic executive.

Do you want to leverage data governance as an enabler?Are you working at driving AI/ML implementation?

Want to stay abreast of data privacy and AI ethics requirements? Are you working hard to push predictive analytics to the limits?

With so much to keep on top of in such a rapidly changing technology space, collaboration is key to success. You don't need to struggle alone, network and share your struggles as well as your tips for success at CDAO Brisbane.

Discover how your peers have tackled the very same issues you face daily. Network with over 140 of your peers and hear from the leading professionals in your industry. Leverage this community of data and analytics enthusiasts to advance your strategy to the next level.

Download the Agenda to find out more


Sam Varghese

website statistics

Sam Varghese has been writing for iTWire since 2006, a year after the site came into existence. For nearly a decade thereafter, he wrote mostly about free and open source software, based on his own use of this genre of software. Since May 2016, he has been writing across many areas of technology. He has been a journalist for nearly 40 years in India (Indian Express and Deccan Herald), the UAE (Khaleej Times) and Australia (Daily Commercial News (now defunct) and The Age). His personal blog is titled Irregular Expression.



Recent Comments